phpMyAdmin creates temporary directories and files in an insecure way. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successful attacks may corrupt data or cause denial-of-service conditions. Other unspecified attacks are also possible. This issue affects phpMyAdmin 2.11.x (prior to 2.11.10.)

Updates are available. Please see the references for details.

• http://www.phpmyadmin.net/home_page/index.php
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.php
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php
• http://www.securityfocus.com/bid/37826

---

Updated on 2015-03-25